NVD

Id
43025  
Name
CVE-2012-0990  
Description
Cross-site request forgery (CSRF) vulnerability in admin/settings/update in DClassifieds 0.1 final allows remote attackers to hijack the authentication of administrators for requests that modify account settings such as the administrator password or email via certain Settings[] parameters.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-02-07  
Modified Date
2012-02-08  
Seq
2012-0990  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
216547 43025 CVE-2012-0990 20120125 CSRF (Cross-Site Request Forgery) in DClassifieds  View
216548 43025 CVE-2012-0990 http://sourceforge.net/projects/dclassifieds/files/csrf_fix_120105.rar/download  View
216549 43025 CVE-2012-0990 51671  View
216550 43025 CVE-2012-0990 dclassifieds-settings-csrf(72733)  View
216551 43025 CVE-2012-0990 https://www.htbridge.ch/advisory/HTB23067  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25623 JVNDB-2012-001330 DClassifieds の admin/settings/update におけるクロスサイトリクエストフォージェリの脆弱性 DClassifieds の admin/settings/update には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2012-0990 54228 CVE-2012-0990 43025 3.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001330.html 2012-02-07 2012-02-09 View